f4150025288f759e5690d615c9d6c85782977ad00c1f72f80b84ac6bdba04cd8

General

Target

f4150025288f759e5690d615c9d6c85782977ad00c1f72f80b84ac6bdba04cd8
Size

86KB
MD5

d030dcf3a481f5f938eeff56421a7063
SHA1

c518407bad69deaa173c70eaf6d2480caf82f6dd
SHA256

f4150025288f759e5690d615c9d6c85782977ad00c1f72f80b84ac6bdba04cd8
SHA512

f4a4241a1f0c763b59a8faf562659ec80ce11e75ee7a6303d8a58ec0aad1f6d8d6e1ca9b8d51fd4cd8589e2309e597050216ff880fab51bb821a3d74207ecac5
SSDEEP

1536:5UTg+ntLH0c1Q4kNzyMAdLbaOEdbF+tyZmMoTp1q:5UTg+ntQDdtAdLba/dbF+tyZmMeM

Score

N/A

Malware Config

Signatures

Files

f4150025288f759e5690d615c9d6c85782977ad00c1f72f80b84ac6bdba04cd8
.exe windows x86

7cd555083fbf1c4e8811f6802f4e93ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord14

kernel32

CreateDirectoryW
GetLastError
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent

gdi32

CreateDCW
SetMapMode
GetMapMode

Sections

.text
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cd555083fbf1c4e8811f6802f4e93ac

Headers

DLL Characteristics

File Characteristics

Imports

cabinet

kernel32

gdi32

Sections

.text Size: 39KB - Virtual size: 40KB

.rdata Size: 27KB - Virtual size: 28KB

.data Size: 18KB - Virtual size: 24KB

.rsrc Size: 1024B - Virtual size: 568B

.text
Size: 39KB - Virtual size: 40KB

.rdata
Size: 27KB - Virtual size: 28KB

.data
Size: 18KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 568B